Elevating Security Awareness

Increasing the Relevance and Scalability of End-User Education

Topics: Information Technology, Information Security, IT Governance, Data Management

The Predictable Fate of Security-as-Campaign

When institutions treat security awareness as campaign, messaging relies on shock value and ubiquity, to which end users get desensitized quickly. Email reminders and meetings with IT staff make an initial impact, but without buy-in from managers, users don’t internalize the need to improve behavior. Soon enough, end-user turnover obviates the campaign’s early success, and the institution ultimately fails to generate long-term commitment with students, faculty, and staff.

Reactive Crowds Out the Intentional

Biggest Opportunity: Elevating Awareness